DISCLOSURE PURSUANT TO ARTICLES 13 AND 14 OF EUROPEAN REGULATION NO. 679/2016 (GDPR) ON THE PROCESSING OF PERSONAL DATA
The Chamber of Commerce of Bergamo, as Joint Data Controller with its special agency Bergamo Sviluppo, intends to provide all the information required by Articles 13 and 14 of Regulation (EU) 679/2016 (GDPR), ensuring that the processing of personal data is carried out with respect for the rights, fundamental freedoms and dignity of the data subjects, with particular reference to confidentiality, personal identity and the right to protection of personal data. The processing of personal data shall be based on lawfulness and fairness, with full protection of the rights and confidentiality of the data subjects.
The data will be processed within the scope of the respective institutional functions of supporting and promoting the local economic and business system.
For the performance of the organisational, logistical and management activities of the competition, the Joint Data Controllers make use of an External Data Processor specifically appointed pursuant to Art. 28 of the GDPR: Ey Advisory S.p.A., with registered office in Milan, acting as the agent company of the Temporary Grouping of Companies (RTI) formed with Carmi and Ubertis Milano S.r.l. (principal company).
The processing concerns common personal data (e.g. personal details, identification data, contact details, company documentation and any audiovisual materials or releases) relating to the participants in the Call for Entries for corporate movies as part of the “MADE Film Festival” project.
Personal data are collected and processed for the following purposes:
- management of the competition: requirements related to enrolment, the verification of eligibility criteria, the assessment of entries by the relevant committees, and the running of the competitive section of the MADE Film Festival 2026.
- MADE archive: The data and materials relating to the finalist corporate movies will be included in the MADE Historical Archive managed by the Chamber of Commerce (or by any delegated body) for the purpose of permanent cultural promotion.
- legal obligations: fulfilment of tax, administrative and legal disclosure obligations.
The legal basis of the processing is the performance of a task of public interest or related to the exercise of public powers vested in the Joint Data Controllers (Art. 6, par. 1(b) of the GDPR), as well as the fulfilment of legal obligations (Art. 6, par. 1(c) of the GDPR).
The data are processed using telematic, computerised and paper systems through procedures that are adequate to guarantee their security and confidentiality. The data will not be subjected to fully automated decision-making processes or profiling activities
The provision of data is compulsory and any refusal shall result in exclusion from participation in the Call. Personal data may be communicated to:
- personnel of the Joint Data Controllers involved in the management of activities related to the Call;
- authorised personnel of Ey Advisory S.p.A. and the relevant RTI;
- members of the Jury or the Festival Selection Committee;
- public or private entities to whom communication is required by virtue of legal or regulatory obligations.
The strictly necessary data (e.g. company name, author’s name, film title, selection results) will be disseminated through the press communication and web and social promotion channels linked to the MADE Film Festival session. The data related to the administrative management and verification of the Call for Entries will be kept for the period strictly necessary to complete the procedures and in compliance with the rules on the retention of administrative documentation (up to a maximum of 10 years for tax and legal traceability obligations).
The data and works intended for the MADE Archive will be kept indefinitely for historical, documentation and promotion purposes of corporate cinema.
The data subject has the right to request from the Data Controller access to and rectification, updating or deletion of personal data if incomplete, erroneous or collected in violation of the law, restriction of processing under its area of competence, transformation of data into anonymous form or to object to the processing.
The Data Subject also has the right to lodge a complaint and appeal with the Data Protection Authority, in accordance with the procedures laid down by the Authority.
The Data Protection Officer of the Bergamo Chamber of Commerce, appointed pursuant to article 37 of EU Regulation 2016/679 on the protection of personal data, can be contacted at the e-mail address serviziodpo@lom.camcom.it. The Data Protection Officer of Bergamo Sviluppo, appointed pursuant to article 37 of EU Regulation 2016/679 on the protection of personal data, can be contacted at the following e-mail address: dpo.bergamosviluppo@bg.camcom.it.